|
The GPO should be set on a OU where the computers are that the users are working on, or higher.
It should be applied to the users working on these computers.
I do to a limited number of users because their superiors require it. As far as I know, it works fine.
| 
